Skip to content
OpenAdvisories

Vendor

wpusermanager

6 known vulnerabilities.

Products

WP User Manager – User Profile Builder & Membership 5 WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-9290 Public exploit

    WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter

    The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile template scope) function. This makes it possible for unauthenticated attackers to …

    wpusermanager WP User Manager – User Profile Builder & Membership Web / CMS